ISOMAN

CVE

CVE-2014-1829

Requests (aka python-requests) before 2.3.0 allows remote servers to obtain a netrc password by reading the Authorization header in a redirected request.

Severity
MEDIUM
CVSS
5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://advisories.mageia.org/MGASA-2014-0409.html
  2. http://www.debian.org/security/2015/dsa-3146
  3. http://www.mandriva.com/security/advisories?name=MDVSA-2015:133
  4. http://www.ubuntu.com/usn/USN-2382-1
  5. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=733108
  6. https://github.com/kennethreitz/requests/issues/1885
  7. http://advisories.mageia.org/MGASA-2014-0409.html
  8. http://www.debian.org/security/2015/dsa-3146
  9. http://www.mandriva.com/security/advisories?name=MDVSA-2015:133
  10. http://www.ubuntu.com/usn/USN-2382-1
  11. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=733108
  12. https://github.com/kennethreitz/requests/issues/1885